# PPIO Agent Sandbox

Official pricing: https://ppio.com/docs/sandbox/pricing.md  
Category: agent-sandbox · Isolation: firecracker

## Pricing regimes (raw)

- **CPU + RAM allocation** (resource): $0.016094195306/vCPU-h, $0.008047097653/GiB-h

## Features

Yes: snapshots, memory snapshots, fork/clone, pause/resume, persistent disk, volumes, idle auto-stop, custom image (Docker or snapshot), start from your own snapshot, your own Docker/OCI image, full VM (own kernel), browser, desktop GUI, computer-use API, code interpreter, browser + desktop control, preinstalled agents, SSH, HTTPS preview URLs, egress allowlist, open internet, static egress IP, Python, Node.js, credential injection, wake on request, live fork (no pause), memory fork, MCP server, automatic snapshots, snapshots on demand, gVisor or VM (no shared kernel), inbound access rules, firewall inside (nftables), secret proxy, secret proxy for any API, extra volumes, shared volumes

No: ≥24 h sessions, Docker inside, nested virtualization, anti-bot stealth, CAPTCHA solving, residential IPs, public IPv4, raw TCP inbound, self-hosting, BYOC, open source, HIPAA, SSO, GPU, arm64, Windows, macOS, HTTP method/path egress rules, live resize, EU data residency, agent harness API, hosted agent API (their own agent)

Unknown: everything else. Evidence (source + quote) per feature: https://battleships.dev/data/providers/ppio-sandbox.json → feature_evidence

## Caveats

- Exact VAT inclusion unknown.
- Volume beta has no independently published rate.
- Engine cannot subtract account-wide 60 GiB snapshot allowance; apply manually.
- Legal corporate relation to Novita remains unresolved.
- Default lifetime is five minutes; explicit timeout/update needed for eight-hour work. Maximum accepted timeout not established in current docs.
- Unknowns remain null, not free; generic infrastructure modes are opt-in alt.
- Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.
- VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.
- SSH (verified 2026-09-28, docs/sandbox/sandbox-ssh-access.md): real OpenSSH server in a custom template, tunnelled over WSS through an exposed sandbox port (websocat ProxyCommand); needs template setup, no direct port 22. ssh = true.
- Egress (re-checked 2026-09-28): pricing.md and sandbox-internet-access.md publish no traffic/egress charge; egress_gib stays null (unknown, not free).
- Disk (re-checked 2026-09-28): every sandbox gets a fixed 20 GB local disk, free ('本地存储免费'); no option to enlarge it or price for extra local disk is documented. Persistent storage has 60 GB free per account then ¥0.0005/GB-h (the snapshot rate). Workloads needing >20 GiB local disk must mount S3 (sandbox-mount-cloudstorage.md) or volumes (beta, unpriced).
- Persistent storage (templates, snapshots, paused sandboxes) is billed per day (按天计费) at CNY 0.0005/GB-h above a 60 GB per-account free allowance; paused sandboxes are kept indefinitely until killed, so storage accrues. Pausing takes ~4 s per GB RAM (billing of that window not stated).
- Regions: cn-shanghai-1 (v1, default, sandbox.ppio.cn) and cn-beijing-1 (v2, added 2026-09-07; Snapshot, Secret, Volume only here). No international sandbox site: ppinfra.com redirects to ppio.com; ppio.ai/ppio.io are parked landers. International sibling = Novita (separate card).

## How this provider charges


As of 2026-09-28. Price basis: public list/reference unless labeled historical, illustrative, promo or unpriced.

PPIO is separately priced from Novita: CNY domestic API, Shanghai v1 and Beijing v2 endpoints. Novita first-party gym repository mentions PPIO templates, suggesting shared engineering, not sufficient proof of legal ownership or identical tariff. Keep distinct IDs. Storage allowance is shared 60 GB/account across templates, snapshots and paused sandboxes.

## Currency, VAT and residency
- Native catalog: CNY. FX: 1 CNY = 0.149020326907 USD, ECB 2026-09-28 ([source](https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/index.cs.html)). USD-listed catalogs remain independent quotes.
- Tax: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency/restrictions: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.

## Regimes
| Regime | When it applies | How billed | Native / USD numbers | Source |
|---|---|---|---|---|
| on-demand | CPU + RAM allocation | allocated wall time; 1 second increment | CNY 0.108/vCPU-h + 0.054/GiB-h → USD 0.016094195306 + 0.008047097653; null means unknown | https://ppio.com/docs/sandbox/pricing.md |
| idle-standby | Paused sandbox | See rule | CPU/RAM zero; state persisted; first 60 GB/account free, then CNY .0005/GB-h. | https://ppio.com/docs/sandbox/pricing.md |
| enterprise | Higher concurrency/custom quota | See rule | Sales-assessed; no published discount. | https://ppio.com/docs/sandbox/pricing.md |

## Gotchas
- Exact VAT inclusion unknown.
- Volume beta has no independently published rate.
- Engine cannot subtract account-wide 60 GiB snapshot allowance; apply manually.
- Legal corporate relation to Novita remains unresolved.
- Default lifetime is five minutes; explicit timeout/update needed for eight-hour work. Maximum accepted timeout not established in current docs.
- Unknowns remain null, not free; generic infrastructure modes are opt-in alt.
- Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.
- VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.
- Residency: cn-shanghai-1 v1 and cn-beijing-1 v2. Do not inherit Novita US regions. Volumes/secrets/new snapshots need v2.

## Required worked example
4 vCPU / 8 GiB requested; 50 simultaneous workers × 8 hours/day × 22 days = **8,800 instance-hours**, 1,100 daily sessions. CPU utilization 30% does not reduce allocated-resource charges. Snapshot retention is **50 GiB total for 730 hours**, not 50 GiB per worker; egress is **100 GiB total**. Root disk size was not specified, so root/volume costs are not silently assigned zero.
- on-demand: USD 0.128753562/allocated hour × 8,800 = **USD 1133.03 compute** (before quotas, fees, free buckets, storage and tax).
- 50 GiB retained state: CNY 0 / USD 0 only if this is the entire account storage total and the shared 60 GB allowance is otherwise unused; excess CNY .0005/GB-hour.
- 100 GiB egress: **unknown**, not USD 0.
- Full all-in bill: **null** where any required storage/network/fee or eligibility fact is unresolved. Quota raises may be necessary for 200 aggregate vCPU / 400 GiB RAM.

## Sources
- https://ppio.com/docs/sandbox/pricing.md
- https://ppio.com/docs/sandbox/quota-limits.md
- https://ppio.com/docs/sandbox/overview.md
- https://ppio.com/docs/sandbox/e2b-compatible.md
- https://ppio.com/docs/sandbox/sandbox-auto-persistence.md
- https://ppio.com/docs/sandbox/volume-overview.md
- https://ppio.com/ai-computing/sandbox
- https://blog.ppio.com/untitled-20/
- https://github.com/novitalabs/novita-gym
- https://ppio.com/docs/sandbox/sandbox-timeout.md